Privacy Policy

The short version

MailOps is a mail routing layer. Your applications hand messages to our SMTP edge, we forward them to the delivery vendor you selected, and we keep the delivery metadata — events, SMTP reply codes, timestamps and diagnoses — that powers your dashboard. The delivery vendor remains the processor that carries your mail.

What MailOps stores

When an application submits a message over authenticated SMTP or the HTTP API, it is queued and handed to the selected vendor (SendGrid, Amazon SES, Mailgun, Postmark, or any connected provider) over TLS. Message content is held only transiently in the delivery queue until the vendor accepts it.

What persists is delivery metadata: envelope recipients, timestamps, vendor responses, SMTP reply codes, delivery and bounce events, suppression entries, and AI diagnoses of bounce clusters. This metadata is what powers the dashboard, the message explorer, the diagnoses, and the audit trail.

Who processes your data

The delivery vendors you connect are the processors that carry your mail, each under its own data processing agreement. Bounce clusters may be analysed by an LLM provider (DeepSeek by default, Anthropic where enabled) using redacted bounce metadata — never full message content. Stripe processes billing data if you subscribe to a paid plan.

Suppression lists are synced so opt-outs are honored regardless of which provider carries a given message.

Security architecture

TLS is enforced on every path: applications authenticate to the SMTP edge with SASL credentials, vendor hand-offs happen over TLS, and inbound webhooks are signature-verified and rate-limited.

Vendor secrets are encrypted at rest with AES-256 (envelope encryption); SMTP relay credentials are stored only as bcrypt hashes. Every tenant’s data is isolated at the database level with row-level security, and administrative changes are written to a tamper-evident audit log.

Retention

Message events and analytics are stored in time-based partitions that are purged automatically once they age out of the retention window for your plan. Suppression entries persist until you remove them, so opt-outs survive across campaigns. Audit logs are retained for the period stated in your service agreement.

Cookies & tracking

This site loads no analytics, advertising, or social embeds. Fonts and media are self-hosted. The application itself uses only the session cookies required to keep you signed in.

Contact

Questions about this policy: privacy@mailops.eu.